This content originally appeared on DEV Community and was authored by Thomas Delfing
How to upgrade your systems legally and practically — step by step
Abstract
Windows 10 support ends in October 2025. Many law firms are wondering whether their PCs, often labeled as “incompatible,” must now be replaced.
Good news: With Microsoft’s own Registry tweaks and well-tested workarounds, Windows 11 can be installed on older systems.
This post explains how to do it, what risks to consider, and how to document the process properly — both legally and technically.
Why This Matters
For law firms, a stable and updated operating system is crucial — for secure beA access, using specialized legal software, and maintaining GDPR-compliant IT.
The issue: Microsoft’s compatibility list excludes many otherwise capable devices.
A complete hardware replacement is expensive and often unnecessary.
Legal & Organizational Aspects
GDPR & BRAO:
OS changes qualify as technical and organizational measures under Art. 32 GDPR.
Document all risk assessments and testing outcomes.Support limitations:
Microsoft does not officially support installations on non-approved hardware.
Updates may be limited.Strategy:
Decide where a bypass makes sense (e.g., secretary PCs)
and where ESU updates or new hardware are better choices.
Three Practical Methods to Install Windows 11
1. 
In-Place Upgrade Using Registry Tweak (MoSetup)**
Recommended when upgrading directly from Windows 10.
Steps:
- Create a backup or system image.
- Press Win + R, type regedit and hit Enter.
- Navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup
Right-click → New → DWORD (32-bit) →
Name: AllowUpgradesWithUnsupportedTPMOrCPU
Value: 1Run the Windows 11 installer (setup.exe).
Command-line shortcut:
reg add "HKLM\SYSTEM\Setup\MoSetup" ^
/v AllowUpgradesWithUnsupportedTPMOrCPU ^
/t REG_DWORD /d 1 /f
2. 
Clean Install Using “LabConfig” Bypass
Required when the installer refuses to start because of hardware checks.
Steps:
- Boot from your Windows 11 USB installer.
- When the error message appears: press Shift + F10.
- Type regedit and open the Registry Editor.
- Navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\Setup
- Create a new key called LabConfig.
- Add the following DWORD values (set each to 1):
- BypassTPMCheck
- BypassSecureBootCheck (optional): BypassCPUCheck, BypassRAMCheck, BypassStorageCheck
Command-line shortcuts:
reg add "HKLM\SYSTEM\Setup\LabConfig" /f
reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f
reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f
3.
USB Installer with Rufus
Rufus
can automatically disable TPM, Secure Boot, and RAM checks
when creating a Windows 11 bootable USB stick — ideal for multiple system migrations.
Post-Installation Checklist
- Run Windows Updates and verify drivers.
- Enable BitLocker (if supported).
- Test critical systems:
- beA
- DMS
- VPN
- Signature cards
- Document all steps and outcomes.
Risks to Consider
- Updates: Microsoft may block security or feature updates.
- Drivers: Older hardware may cause stability issues.
- Security: Without TPM/Secure Boot, protection layers are reduced.
Recommendations for Law Firms
- Critical systems -> Use Windows 10 ESU updates and plan hardware refresh
- Secondary workstations -> Perform In-Place Upgrade with Registry edit
- Older PCs without TPM/SB -> Only use Clean Install or Rufus after documented risk review
Conclusion
Upgrading to Windows 11 on “incompatible” law firm hardware is
technically feasible, legally defensible, and manageable —
as long as it’s properly documented and controlled.
For IT leads:
- Always secure backups
- Test pilot systems before full rollout
- Record procedures in writing
This approach lets your firm transition smoothly into the next Windows generation
— without replacing all your hardware.
This content originally appeared on DEV Community and was authored by Thomas Delfing